User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:b0cd9e91a328be4b82e9ef8f1cbfb32e42214b062ba58ad62fa1c289215ad78d
General
- Target b0cd9e91a328be4b82e9ef8f1cbfb32e42214b062ba58ad62fa1c289215ad78d.zip
- Size 807B
- Sample260817-tqthmsvapd
- SHA256 c699a3e931941ca8eda129e4d0fa45006998d837c68cd19fdfe8e0cb33b376d1
- MD5 ce71fa8eecabb3ac85cca18f8e435d56
- SHA1 94f07177c2071ed612ff49637471a71e1d2e7426
- SHA512 d2c6abfe4ba24f6c8e5e6712df80be10ec598984439e568fc459ea9952ce862cd111442327300a6209c27d12b6a85745f296bbdb1635f6711fd77cdb5a31fe5f
- TLSH T1C8017591A6C98E01D1E7AA3C725D730C2970D522480C15EB46CBD9E21E8A9E73722913
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EVK75O.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-EVK75O.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-EVK75O.lnk
- Size 1KB
- SHA256 4c996b6765bf4dd90788cdc3241f843e1c1af72687d4a2da871531dab0b92716
- MD5 2934e8248b8331f7679453f668548d7f
- SHA1 5f2a2f407c81bc88cb0fa53b754519f99bdf23fd
- SHA512 b96adcb11866aa8794f587d290eab8b61364a1b007c601917211a8857bd879c4d0aebe76a95ee24a87514f77a9c0ba04b53b25fab2b2a1e3a980c2e19a5d9639
- TLSH T1483197103FED0624F3B79F7284BB572089BBB8998D20CB2E0140450C5032A15E93AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.